$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: 5u6pdQFciTjW4ZKLwxv7nk9NpYcC3FxKozWoxX0JIU8= Subject key identifier: D3:B4:AA:8D:BF:6E:E0:01:ED:E2:C2:E3:1F:2C:C7:99:0B:F0:21:C7 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 61CFF62006DC9998BA61A61DB48F2813D4B8B866 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 021A Signing time: Mon 12 May 2025 17:57:37 +0000 Manifest this update: Mon 12 May 2025 17:52:37 +0000 Manifest next update: Tue 13 May 2025 21:53:37 +0000 Files and hashes: 1: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=) 2: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) 3: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: a4d/AGfEO1yKAeZCMITtrTIBij7b63fATQrq+Fv2ZUc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 21:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cf:f6:20:06:dc:99:98:ba:61:a6:1d:b4:8f:28:13:d4:b8:b8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: May 12 17:52:37 2025 GMT Not After : May 13 21:53:37 2025 GMT Subject: CN=D3B4AA8DBF6EE001EDE2C2E31F2CC7990BF021C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:29:3b:b2:1a:e8:a1:31:df:3a:0c:3a:4f: 58:8a:48:c9:a4:68:42:55:99:ac:c0:bd:4e:b6:c4: 04:c7:46:e8:b9:6d:11:70:96:46:bb:18:96:5f:6d: 13:0e:a6:3a:06:28:3f:b8:94:ee:c9:89:0f:60:86: 7c:73:b9:dc:d6:aa:70:b8:1e:72:22:c1:00:e7:92: d4:47:f8:a3:2d:35:84:73:15:d9:7c:b4:4c:4e:19: fe:c8:67:42:23:9e:6d:c9:f5:f0:ab:95:f8:aa:6c: dc:23:3d:3f:3f:c7:6a:e3:d3:44:a7:65:ac:76:a6: a0:6a:22:be:95:3e:f9:3f:ce:da:e8:d7:5a:b9:61: f6:43:77:3e:b4:e7:f9:66:07:74:43:02:1e:1c:e0: 80:4f:67:c0:71:15:85:81:b5:b6:62:52:c5:bb:ae: d6:32:55:7f:5c:73:4f:71:63:d3:fa:0b:e2:d7:93: 7d:d9:5a:c2:a3:af:5b:44:9e:f3:ba:36:45:b4:c0: e2:e2:31:5a:d2:ee:4b:cc:49:6c:03:2d:67:45:e1: b9:b1:82:f5:2e:d5:b1:6b:12:19:8d:0b:f0:12:8f: e7:45:7e:9c:c5:c8:1d:bb:68:fe:fd:03:19:ab:28: c4:1c:2a:8a:69:e1:bf:27:1d:9b:49:44:b5:e0:b8: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B4:AA:8D:BF:6E:E0:01:ED:E2:C2:E3:1F:2C:C7:99:0B:F0:21:C7 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:86:fc:5b:c0:35:3c:d6:93:c3:44:f2:80:b0:68:64:59: 46:b5:b4:64:da:a9:f9:c1:fb:49:f7:c7:cc:f1:f1:c7:21:db: 4f:23:b9:d2:42:2b:39:81:33:d6:86:ac:03:55:49:24:d3:3d: ff:78:e2:d7:65:b7:3a:24:5e:f1:3f:06:bf:eb:e3:ec:01:7b: 88:64:7b:a3:df:ab:71:b6:7b:47:19:8b:02:a7:1c:c6:6f:17: 0b:8b:ec:42:5c:3f:b3:5b:5e:f4:ae:af:62:37:b1:07:b9:8c: 2b:4c:c3:60:86:84:d1:fb:15:91:68:d5:30:3f:b7:d8:9a:19: aa:8d:d7:b5:44:f9:c0:0e:b9:d4:8d:d4:f8:d8:96:0d:0e:5a: 80:d8:0e:0f:81:fc:46:43:13:d2:db:8c:a3:ee:f9:10:07:5c: 5a:71:8a:9f:9f:6a:ef:ed:29:5d:c6:57:07:38:9f:57:c7:e2: 81:96:ad:7e:77:d6:cc:bb:d2:a1:50:4c:bf:a7:07:2b:e1:a9: 43:b0:a5:e3:a0:73:91:10:8d:ce:59:bc:94:78:56:c7:64:02: 33:a2:ca:a7:a7:98:68:67:ca:ad:b4:3f:29:c2:8b:9e:93:49: ce:92:1b:1f:b9:0e:ae:9d:80:9b:f9:c6:79:d9:83:bf:31:fb: 0f:ad:33:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYc/2IAbcmZi6YaYdtI8oE9S4uGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTA1MTIxNzUyMzdaFw0yNTA1MTMyMTUzMzdaMDMxMTAvBgNV BAMTKEQzQjRBQThEQkY2RUUwMDFFREUyQzJFMzFGMkNDNzk5MEJGMDIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDSk7shrooTHfOgw6T1iKSMmk aEJVmazAvU62xATHRui5bRFwlka7GJZfbRMOpjoGKD+4lO7JiQ9ghnxzudzWqnC4 HnIiwQDnktRH+KMtNYRzFdl8tExOGf7IZ0Ijnm3J9fCrlfiqbNwjPT8/x2rj00Sn Zax2pqBqIr6VPvk/ztro11q5YfZDdz605/lmB3RDAh4c4IBPZ8BxFYWBtbZiUsW7 rtYyVX9cc09xY9P6C+LXk33ZWsKjr1tEnvO6NkW0wOLiMVrS7kvMSWwDLWdF4bmx gvUu1bFrEhmNC/ASj+dFfpzFyB27aP79AxmrKMQcKopp4b8nHZtJRLXguEWtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU07Sqjb9u4AHt4sLjHyzHmQvwIccwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQuyG/FvANTzWk8NE8oCwaGRZRrW0ZNqp+cH7SffHzPHxxyHbTyO50kIrOYEz 1oasA1VJJNM9/3ji12W3OiRe8T8Gv+vj7AF7iGR7o9+rcbZ7RxmLAqccxm8XC4vs Qlw/s1te9K6vYjexB7mMK0zDYIaE0fsVkWjVMD+32JoZqo3XtUT5wA651I3U+NiW DQ5agNgOD4H8RkMT0tuMo+75EAdcWnGKn59q7+0pXcZXBzifV8figZatfnfWzLvS oVBMv6cHK+GpQ7Cl46BzkRCNzlm8lHhWx2QCM6LKp6eYaGfKrbQ/KcKLnpNJzpIb H7kOrp2Am/nGedmDvzH7D60zQQ== -----END CERTIFICATE-----Generated at Mon May 12 22:39:47 2025 by rpki-client